Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
File: JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft (raw, json)
Hash identifier: 0Oh47qnWKELN3jgv5ljqAZm6niPaexixJ0u2SZZT2VQ=
Subject key identifier: EE:1D:CB:FF:03:F7:D5:4E:82:BD:5C:DD:92:FA:35:BE:92:11:CD:E2
Authority key identifier: 25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
Certificate issuer: /CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Certificate serial: 019CABD8F18FE88203DF0398BF913001F18F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 00:00:47 +0000
Manifest this update: Mon 02 Mar 2026 00:00:47 +0000
Manifest next update: Tue 03 Mar 2026 00:00:47 +0000
Files and hashes: 1: A4GalviEuSvDRygo_-qVl6eCT10.roa (hash: sSlPwV0yRve9+trsnROr061h+b28t0Ygn3kbHKwNHiA=)
2: JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl (hash: 3DkX9Taug/a1L2Jgc5bVYtBqvSMpVZ19Ogg3T6y86pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:f1:8f:e8:82:03:df:03:98:bf:91:30:01:f1:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2528b71f1e7ca69531dd5df2559513598db1c7f3
Validity
Not Before: Mar 2 00:00:47 2026 GMT
Not After : Mar 3 00:00:47 2026 GMT
Subject: CN=ee1dcbff03f7d54e82bd5cdd92fa35be9211cde2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:ef:7f:2c:17:8e:0d:a6:b6:fd:14:2b:0d:
d6:d3:7e:22:03:93:3d:64:3b:6a:c2:50:65:e1:3e:
e1:6b:36:4b:65:bd:95:f8:ad:fe:1c:c8:62:92:4e:
59:40:77:09:d3:21:5d:28:9f:b0:98:df:df:2b:34:
dc:d1:d4:cc:da:00:d8:f8:36:88:8a:ee:4e:2d:6e:
60:25:55:82:c5:96:7b:81:51:02:32:a9:50:57:6e:
04:94:6a:88:e0:46:68:86:4c:a7:4e:bf:f2:e1:31:
cd:4c:ef:d8:3c:f2:a4:6b:53:17:be:0d:2c:ba:72:
c9:e5:99:47:06:df:b3:45:84:b7:0a:2f:bc:42:96:
1d:da:0d:da:7b:66:61:79:78:cf:f4:e9:d7:0c:0b:
cb:4b:54:2f:26:67:98:12:25:b0:19:0b:ae:9f:dd:
24:8f:cd:ed:22:45:00:26:8c:76:70:82:55:83:65:
9b:a6:d5:fe:4a:b8:a8:0a:76:aa:40:46:a4:14:c3:
bb:35:5a:7c:71:bc:c3:19:81:ac:44:22:23:f6:c3:
e1:2a:cf:44:9c:dd:8c:c2:6f:fa:43:2c:a0:92:50:
f0:d5:45:db:c4:a1:6f:c1:33:8b:e3:d5:08:96:74:
43:e5:73:12:11:7b:09:70:3a:13:a2:b5:b8:9b:c8:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1D:CB:FF:03:F7:D5:4E:82:BD:5C:DD:92:FA:35:BE:92:11:CD:E2
X509v3 Authority Key Identifier:
keyid:25:28:B7:1F:1E:7C:A6:95:31:DD:5D:F2:55:95:13:59:8D:B1:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JSi3Hx58ppUx3V3yVZUTWY2xx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/30d69e-f0e7-46f3-9759-ed32c5612840/1/JSi3Hx58ppUx3V3yVZUTWY2xx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:56:da:ed:2d:d0:07:86:36:cc:39:39:c7:4c:f3:87:9d:ec:
01:fa:0e:df:1c:9c:2a:f7:7d:48:28:7b:6f:f0:dd:4c:76:79:
6d:9f:b2:4f:22:e1:0f:31:86:fb:fb:52:02:bb:0b:af:de:44:
f4:71:0e:c5:8c:12:69:24:18:22:ab:18:bc:b0:74:a3:d9:cf:
9a:d4:1d:8b:32:63:b0:43:7c:07:5b:30:08:cb:e9:a2:f2:c8:
b8:80:d1:d2:5d:7c:7d:0f:c2:42:79:49:f7:b3:80:ef:b3:03:
eb:88:37:ef:87:33:19:80:06:af:8a:d8:13:7b:16:b5:cc:10:
87:4a:fd:79:ac:02:33:53:54:d0:32:20:db:07:f5:37:bb:fa:
bc:eb:e2:be:69:fc:7a:90:27:a1:68:8f:99:3e:1b:cf:2e:89:
cc:7c:04:bd:71:95:ee:1c:03:04:de:85:13:a1:c5:aa:da:ea:
44:d6:b3:9f:3f:7f:5d:33:35:2e:e6:48:3a:0d:33:8b:53:78:
3f:00:76:92:99:ad:57:2b:07:1a:cd:99:0b:49:4c:0c:df:3c:
cd:e1:b2:9e:61:98:f7:2f:21:8f:d7:23:47:97:e0:3f:3f:7e:
a1:ae:8b:2a:0f:6c:93:42:ed:98:e5:5d:17:5b:07:a2:60:20:
6e:b5:39:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:20:10 2026 by rpki-client